CVE-2024-55271

This vulnerability allows an attacker to inject malicious scripts into the student record system, potentially compromising users' data or sessions when they visit the affected page. The attack can be executed remotely by manipulating a specific argument in the URL, making it easy for attackers to exploit.

An attacker can inject malicious scripts into the PHPGurukul Student Record Management System through the Course Short Name field, potentially allowing them to steal sensitive information from users who visit the compromised page. This vulnerability can be exploited remotely, meaning the attacker doesn't need physical access to the system to carry out the attack.

This vulnerability allows an attacker to manipulate the database of the student management system by injecting harmful SQL code through the searchdata parameter, potentially exposing sensitive information or altering data. To exploit this, the attacker needs access to the search feature on the admin page.